4 matches found
CVE-2026-19864
Eclipse Jetty's SessionAuthentication retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext. An...
CVE-2026-19864
The Eclipse Jetty server's SessionAuthentication component contains a vulnerability where authentication credentials are retained in a serializable object . If these credentials include a plaintext password and the authenticated session is persisted to a session data store, the password may be wr...
CVE-2026-19864
Eclipse Jetty's SessionAuthentication retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext. An...
EUVD-2026-101994
Eclipse Jetty's SessionAuthentication retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext. An...